I've spent way too many years in networking / network security for this to be *that* surprising, but it appears the TCP 3-way handshake isn't the only way to set up a connection.

Take a look @ This Article for some interesting detail and a lot of comments on the subject.